Privacy
Written to be read rather than to be defensible. If something here is unclear, that is a fault worth telling us about.
This notice is not final.
The list of what we collect is accurate. The legal wording, the retention periods and the named grievance officer are still being settled with a lawyer under India’s Digital Personal Data Protection Act 2023. We would rather say that than publish something that sounds finished and is wrong.
What we collect
About you
To sign you in and to address you. We never store a password for buyers or hosts — sign-in is a one-time code sent to your email.
- Name
- Email address
- Phone number (only if you give one)
About your company
Because space is let between businesses, and the other side needs to know who they are dealing with.
- Legal and trading name
- City
- Team size
- Website and description, if you add them
- A contact phone number
- GSTIN, CIN and PAN, if you provide them for verification
If you list a space
To show your space to buyers. The exact address is held back — see below.
- The building’s full address and postal code
- An approximate map point, coarsened to roughly half a kilometre
- Photographs you upload
- Price, availability, terms and amenities
What you do here
To run the service and to investigate abuse.
- Properties you shortlist, unlock or enquire about
- Messages you send through the site
- Visit requests and their outcomes
- A record of administrative actions taken on your account
A host’s exact address
This is the one piece of data the whole product is built around, so it is worth being precise. A buyer paying for access does not get the address. It is released only when the host accepts that buyer’s request to visit, and every release is recorded against the host’s decision. Until then buyers see the district and an approximate point.
Who else sees it
- The other side of a deal. A host sees which company enquired; a buyer sees the host’s company. Shortlisting a space tells the host somebody did, not who.
- Our own team. Access is limited by role, and opening a page that lists customer data is itself recorded.
- Our email provider, to deliver notifications.
- Nobody else. We do not sell data and we run no advertising or third-party analytics. Nothing about your visit leaves our servers.
How we measure our own pages
We count page views ourselves, on our own servers, so we can see where people get stuck. There is no third-party analytics service, no advertising network and no tracking across other websites — nothing about your visit is sent anywhere else.
What a measurement records: which kind of page you opened, how long it was visible, which of a short list of buttons you pressed, whether you were on a phone or a computer, and the website that linked you to us. It does not record the exact address of the page, so the identifier of a conversation, an invoice or a particular listing is never stored. We do not store your IP address, and we do not store anything you typed.
A random id in a cookie tells us that a browser came back; it is not built from anything about you or your device, and clearing your cookies resets it completely. If you are signed in, the visit is linked to your account so we can understand the journey people take — the team only ever reads this as totals, not as one person’s history. It is deleted after a few months.
If your browser sends “Do Not Track” or Global Privacy Control, we record nothing at all. The pages of our own admin console are never measured.
Getting a copy, or getting it deleted
Email us and we will send you everything we hold about you, or delete it. We do this by hand today, so allow a few days — there is no self-serve button yet, and we would rather admit that than pretend otherwise.
Some records survive a deletion because we are required to keep them: an invoice, and the audit trail of decisions taken on an account. We will tell you exactly what was kept and why.
How to reach us